Featured
Chinese Hacker Indicted for Massive Sophos Firewall Attack Affecting 81,000 Devices
The U.S. Department of Justice has charged Chinese national Guan Tianfeng for exploiting Sophos firewall vulnerabilities that compromised 81,000 devices globally. The attack, linked to China's Ministry of Public Security, prompted multi-agency U.S. response including sanctions and a $10 million reward for information.
Russian Hackers Hijack Criminal Networks to Target Ukrainian Starlink Devices
Russian state-backed group Secret Blizzard has adopted an unusual tactic of compromising other cybercrime groups' infrastructure to infiltrate Ukrainian military Starlink connections. Microsoft's report reveals the hackers leveraged malware tools from multiple threat actors to gather intelligence on military hardware.
Global Meta Outage Disrupts Facebook, Instagram, and WhatsApp Services for Hours
A massive technical failure struck Meta's platforms, leaving billions of users worldwide unable to access Facebook, Instagram, and WhatsApp for several hours. The comprehensive disruption affected both consumer apps and business products, marking Meta's largest service interruption since 2021.
OnlyFans Creators Embrace AI Assistants to Manage Fan Communications
Content creators on OnlyFans are turning to AI-powered tools to handle thousands of daily fan messages while maintaining personal connections. Companies like ChatPersona and FlirtFlow offer sophisticated solutions that help creators manage conversations, identify valuable subscribers, and maximize earnings.
China's EagleMsgSpy: Sophisticated Android Surveillance Tool Exposed
Researchers have uncovered a powerful spyware tool used by Chinese law enforcement to collect extensive data from Android devices since 2017. The surveillance system, developed by Wuhan Chinasoft Token Information Technology, can capture everything from call logs to real-time screen recordings.
Krispy Kreme's Online Ordering Hit by Cyberattack, Disrupting Digital Sales
Popular doughnut chain Krispy Kreme faces operational disruptions after detecting an unauthorized system breach affecting its U.S. online ordering platforms. While physical stores remain open, the company acknowledges potential material impact as it works with cybersecurity experts to investigate and restore services.
Turkish Highway Toll App Hit by Bitcoin Ransom Attack Through Push Notification Exploit
Turkey's electronic toll collection app HGS was compromised through its notification system API, with hackers demanding $25,000 in Bitcoin from users. While the Post and Telegraph Directorate assured data security, the incident exposed vulnerabilities in the widely-used public service application.
ZLoader Returns: New Variant Uses DNS Tunneling to Evade Detection
A sophisticated new variant of ZLoader malware has emerged with enhanced stealth capabilities, using DNS tunneling to mask command-and-control communications. The version 2.9.4.0 update introduces an interactive shell and custom protocols, marking the malware's concerning evolution after a two-year hiatus.
BlackSuit Ransomware Group Suspected in Tennessee School District Cyberattack
The Tennessee Bureau of Investigation is investigating a major network disruption at Rutherford County Schools that began November 25. While no data breach has been confirmed, the BlackSuit ransomware group is potentially linked to the incident that has forced the district offline.